Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: 9W1Pgtna77KZDHagjoW//lttfw0HxCiyMZMVIvUatJc=
Subject key identifier: 5B:04:E4:D7:EF:62:2C:94:82:5C:B4:AA:96:57:96:A7:52:64:7A:D8
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 019DA1F7C34890469AB8B9D35E08A4F47E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 18C5
Signing time: Sat 18 Apr 2026 19:01:02 +0000
Manifest this update: Sat 18 Apr 2026 19:01:02 +0000
Manifest next update: Sun 19 Apr 2026 19:01:02 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 0QbNC9RbVideq6yROu1haGCPQAvJ93f/PQSMtJRQmKg=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:f7:c3:48:90:46:9a:b8:b9:d3:5e:08:a4:f4:7e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Apr 18 19:01:02 2026 GMT
Not After : Apr 19 19:01:02 2026 GMT
Subject: CN=5b04e4d7ef622c94825cb4aa965796a752647ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:06:4e:4b:f3:36:5e:3b:9e:6d:3a:64:62:
0c:93:15:96:4d:33:31:6b:5e:fb:6d:19:6f:03:ff:
10:3a:80:60:a0:3f:9a:16:28:17:6c:48:dc:b9:62:
15:ba:09:21:7e:74:15:1a:c5:6a:e7:09:b1:cc:84:
8f:31:5a:14:ca:d9:dd:b4:46:19:71:74:49:20:95:
5b:9a:01:75:fe:1d:40:20:d2:fb:fa:bf:de:85:63:
4f:8d:74:fd:19:9f:43:87:89:aa:71:28:e2:52:c0:
06:6a:60:31:19:cc:18:55:f9:02:61:09:25:8e:83:
c2:28:cd:34:7b:50:49:3c:8e:09:c2:ee:9f:5c:63:
17:00:1d:c9:aa:61:98:28:2e:8d:69:d9:6a:fc:6b:
61:29:ec:9d:87:1f:a0:66:e7:bc:a8:b1:4f:62:92:
a2:ac:87:6f:50:ae:ba:df:26:23:66:26:ff:bd:ca:
8a:54:80:fb:a9:ac:40:f6:8f:a4:00:d6:5b:3b:5a:
c6:5a:e6:bf:72:c5:58:12:11:89:98:a5:0f:82:ba:
73:5a:7d:a8:f7:77:24:d1:3b:81:2c:52:ca:a8:be:
18:5d:b2:8b:b8:d7:74:b7:48:c5:fd:09:47:8f:31:
1c:a4:33:7e:8c:73:cb:17:d0:4f:ec:7f:91:f9:6e:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:E4:D7:EF:62:2C:94:82:5C:B4:AA:96:57:96:A7:52:64:7A:D8
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e1:98:2d:11:3c:75:d7:6d:9e:cd:44:ce:71:2d:c9:8d:29:
83:cd:f2:e2:79:74:91:5e:c4:d4:ce:10:e0:12:84:35:ce:03:
6c:ed:02:10:cd:d6:55:9e:c6:ae:5b:c7:96:f0:a4:69:4f:0f:
b3:75:70:fc:de:60:33:2e:5c:35:fa:b4:48:2a:ab:5f:cc:17:
79:5b:c7:9e:bf:99:fa:f6:1e:c1:52:7f:45:d5:05:2b:bb:49:
56:2a:cd:f1:38:05:7d:93:36:66:9b:0f:cd:a8:88:e5:38:bc:
98:bc:f4:d6:c5:f4:88:89:63:8a:98:54:a4:14:87:32:73:b6:
91:0a:03:28:e2:f1:a5:9c:59:fb:10:35:9e:ea:01:47:86:82:
c2:b6:81:6b:8f:00:e8:07:ac:61:07:d9:73:d6:8f:50:fa:a7:
8e:be:34:8a:a0:44:c5:0b:ac:42:8b:85:82:70:db:80:c1:af:
29:bf:c6:f3:b8:9f:10:6b:84:67:87:2b:8c:7b:8d:88:24:e5:
6f:83:4a:c1:3a:3f:18:68:1d:64:87:4e:1a:b0:66:39:ca:e1:
98:22:d4:8c:f0:05:5e:63:64:fb:1c:ab:05:be:31:7f:8d:3e:
7e:14:9d:4d:a6:c8:0d:79:9f:b5:e9:09:d9:c7:c9:06:0e:87:
76:9d:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:54:30 2026 by rpki-client